patriksimek/vm2
View on GitHub ↗ ★ 4,114 JavaScript
Advanced vm/sandbox for Node.js
10 mentions on Hacker News by 10 people: 5 stories, 5 comments · first 2016-10-14 · latest 2026-06-11
20082026
-
…WASI feature of that specific runtime which is gated behind a build flag. ------ [Re: 3] https://github.com/patriksimek/vm2 > vm2 attempts to sandbox untrusted JavaScript code within the same Node.js process as your application. It does…
comment by dns_snek · 2026-06-11 · in The Road to the WASM Component Model 1.0 -
This could be solved by having some kind of sandbox ( https://github.com/patriksimek/vm2 ), but I agree it complicates it. It would be cool if tsc had a flag —sandboxed or similar that does not allow any sideeffects (fs access, output,…
comment by mejutoco · 2021-11-17 · in The perfect configuration format? Try TypeScript -
…way a developer would have to opt in to granting permissions for a package to run executable code. https://github.com/patriksimek/vm2 https://medium.com/agoric/ses-securing-javascript-in-the-rea...
comment by dane-pgp · 2021-11-05 · in RFC: Make NPM install scripts opt-in -
…NodeJS also includes a sandbox in its standard lib. And there are more advanced versions out there: https://github.com/patriksimek/vm2 Good luck and be careful ;)
comment by ArtWomb · 2018-08-09 · in Ask HN: Securely run code uploaded by users -
…Is the lack of maturity also the reason for not choosing something like vm2 for NodeJS https://github.com/patriksimek/vm2
comment by narsil · 2017-09-29 · in Cloudflare Workers: Run JavaScript Service Workers at the Edge